fix user input to be untainted